
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/541ab674-14b2-3b2e-80e5-618bee482529.roa
File: 541ab674-14b2-3b2e-80e5-618bee482529.roa (raw, json)
Hash identifier: 638hhQyJsrnP8mFrHNFCMZa1qHUtzvfD9iX8vpPWFUY=
Subject key identifier: F3:55:FC:10:48:B7:CB:04:04:BB:39:B1:C4:45:7A:71:E7:E0:30:B3
Certificate issuer: /CN=1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a
Certificate serial: 010D0C9F4328584B98724006F0BB63CB153E0380
Authority key identifier: 41:7C:7B:A8:34:ED:81:03:82:86:EE:D9:97:FA:70:1C:5B:6F:27:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/541ab674-14b2-3b2e-80e5-618bee482529.roa
Signing time: Tue 21 Oct 2025 13:00:39 +0000
ROA not before: Tue 21 Oct 2025 13:00:39 +0000
ROA not after: Mon 19 Jan 2026 14:00:39 +0000
asID: 394177
IP address blocks: 64.20.216.0/22 maxlen: 32
170.39.176.0/22 maxlen: 32
209.112.76.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Oct 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:98:72:40:06:f0:bb:63:cb:15:3e:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a
Validity
Not Before: Oct 21 13:00:39 2025 GMT
Not After : Jan 19 14:00:39 2026 GMT
Subject: CN=ae552275-ecd4-449c-8719-4da11cb8220d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:84:15:92:47:70:9c:63:19:d0:bf:d4:ae:
76:a3:5d:62:f8:ca:ea:c1:6c:f6:fa:bb:54:6d:22:
8c:c2:87:c3:ca:3c:3c:27:1c:55:38:f8:88:d1:2f:
36:85:f4:c0:19:ab:5c:b7:4f:fe:85:0f:6b:a4:ab:
b1:9d:24:32:e9:5d:c7:05:b9:8c:9a:29:80:fe:21:
61:d2:4b:9e:af:ac:4a:6b:82:ae:85:0b:4c:26:ed:
4e:01:21:b2:32:7b:c2:c1:55:d2:b0:bb:08:5d:6c:
8e:17:31:29:7d:8a:ec:f5:04:66:67:d6:c7:da:b8:
cd:e3:c7:2a:ab:60:d4:e7:60:f9:0d:0d:71:66:4d:
45:80:32:ad:94:9f:92:fc:54:32:88:31:1c:ff:bc:
ae:21:b9:65:ba:60:24:5c:77:e9:b5:08:f8:16:24:
34:05:ee:1f:1e:26:67:0f:6a:97:04:87:89:42:0c:
57:45:e7:e3:c3:0b:83:5a:17:2e:7c:e7:e0:c1:41:
65:70:28:17:eb:2c:17:c7:61:75:71:38:ab:40:56:
c7:35:07:88:ed:72:b1:7d:b6:ff:ce:2a:2b:02:d1:
03:b3:90:a2:0b:61:e9:09:52:05:97:70:ed:63:c6:
1f:a9:fc:d4:6b:6b:c2:33:c1:79:78:30:3d:b4:d6:
86:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:55:FC:10:48:B7:CB:04:04:BB:39:B1:C4:45:7A:71:E7:E0:30:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/541ab674-14b2-3b2e-80e5-618bee482529.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.crl
X509v3 Authority Key Identifier:
keyid:41:7C:7B:A8:34:ED:81:03:82:86:EE:D9:97:FA:70:1C:5B:6F:27:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer
sbgp-ipAddrBlock: critical
IPv4:
64.20.216.0/22
170.39.176.0/22
209.112.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:af:90:41:61:d5:ab:55:a9:71:88:a4:a6:a6:5a:5a:d0:cc:
80:23:3d:80:68:46:c2:ef:6d:83:57:7d:62:19:51:d2:5d:96:
27:0b:6e:eb:38:7a:94:ea:06:bf:52:09:90:a5:64:bd:e6:c8:
c9:1a:2f:bc:9e:cb:43:72:c9:b1:8c:96:ea:47:1f:41:e8:3e:
aa:67:04:a4:6d:1c:61:53:62:90:d7:b0:c1:b2:de:82:d8:eb:
96:10:a3:4e:26:89:82:b9:23:39:8c:1c:60:fa:67:19:86:71:
58:a6:2a:00:d4:b8:3c:38:15:ac:da:b0:03:b4:32:8c:7d:36:
ea:b9:ee:cb:d3:07:2b:5c:65:f6:57:31:32:53:70:44:f7:64:
60:6e:ec:3f:66:4c:96:10:6a:d4:70:8c:a1:95:54:13:c4:0a:
8c:07:9b:0d:f8:b0:64:70:89:83:2e:fb:63:5a:a2:40:10:6f:
af:1c:b9:81:9f:c5:ae:f0:7f:47:c0:37:79:b3:5c:16:1d:52:
19:1a:b9:5f:a0:96:a5:b5:ae:c5:c3:bb:d4:2b:f9:3e:64:71:
aa:95:17:41:ea:2e:1e:89:f8:68:04:58:d0:21:c9:8e:8c:eb:
59:a6:68:24:e0:1d:2c:ca:9c:52:46:ab:53:24:54:33:a9:23:
1a:27:14:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 18:41:38 2025 by rpki-client